6fdb17cbbe
- Add a `destroy_user` ability. This didn't exist before, and was implicit in other abilities (only admins could access the admin area, so only they could destroy all users; a user can only access their own account page, and so can destroy only themselves). - Grant this ability to admins, and when the current user is trying to destroy themselves. Disallow destroying ghost users in all cases. - Modify the `Users::DestroyService` to check this ability. Also check it in views to decide whether or not to show the "Delete User" button. - Add a short summary of the Ghost User to the bio.
68 lines
1.5 KiB
Ruby
68 lines
1.5 KiB
Ruby
FactoryGirl.define do
|
|
sequence(:name) { FFaker::Name.name }
|
|
|
|
factory :user, aliases: [:author, :assignee, :recipient, :owner, :creator, :resource_owner] do
|
|
email { FFaker::Internet.email }
|
|
name
|
|
sequence(:username) { |n| "#{FFaker::Internet.user_name}#{n}" }
|
|
password "12345678"
|
|
confirmed_at { Time.now }
|
|
confirmation_token { nil }
|
|
can_create_group true
|
|
|
|
trait :admin do
|
|
admin true
|
|
end
|
|
|
|
trait :blocked do
|
|
after(:build) { |user, _| user.block! }
|
|
end
|
|
|
|
trait :external do
|
|
external true
|
|
end
|
|
|
|
trait :two_factor do
|
|
two_factor_via_otp
|
|
end
|
|
|
|
trait :ghost do
|
|
ghost true
|
|
after(:build) { |user, _| user.block! }
|
|
end
|
|
|
|
trait :two_factor_via_otp do
|
|
before(:create) do |user|
|
|
user.otp_required_for_login = true
|
|
user.otp_secret = User.generate_otp_secret(32)
|
|
user.otp_grace_period_started_at = Time.now
|
|
user.generate_otp_backup_codes!
|
|
end
|
|
end
|
|
|
|
trait :two_factor_via_u2f do
|
|
transient { registrations_count 5 }
|
|
|
|
after(:create) do |user, evaluator|
|
|
create_list(:u2f_registration, evaluator.registrations_count, user: user)
|
|
end
|
|
end
|
|
|
|
factory :omniauth_user do
|
|
transient do
|
|
extern_uid '123456'
|
|
provider 'ldapmain'
|
|
end
|
|
|
|
after(:create) do |user, evaluator|
|
|
user.identities << create(
|
|
:identity,
|
|
provider: evaluator.provider,
|
|
extern_uid: evaluator.extern_uid
|
|
)
|
|
end
|
|
end
|
|
|
|
factory :admin, traits: [:admin]
|
|
end
|
|
end
|